If using WPA/WPA2 PSK then it is recommended to reduce the EAPOL-Key Timeout to 400 milliseconds from the default of
1000 milliseconds with EAPOL-Key Max Retries set to 4 from the default of 2.
If using WPA/WPA2, then using the default values where the EAPOL-Key Timeout is set to 1000 milliseconds and EAPOL-
Key Max Retries are set to 2 should work fine, but is still recommended to set those values to 400 and 4 respectively.
The EAPOL-Key Timeout should not exceed 1 second (1000 milliseconds).
To change the EAPOL-Key Timeout on the Cisco Unified Wireless LAN Controller, telnet or SSH to the controller and enter
the following command.
(Cisco Controller) >config advanced eap eapol-key-timeout 400
To change the EAPOL-Key Max Retries Timeout on the Cisco Unified Wireless LAN Controller, telnet or SSH to the
controller and enter the following command.
(Cisco Controller) >config advanced eap eapol-key-retries 4
Proxy ARP
To advertise the proxy ARP information element, ensure that Aironet Extensions are enabled.
Ensure proxy ARP is enabled, where ARP Unicast Mode will be displayed as disabled on the Cisco Unified Wireless LAN
Controller.
Telnet or SSH to the controller and enter show network or show network summary depending on the Cisco Unified Wireless
LAN Controller version.
If ARP Unicast Mode is enabled, enter config network arpunicast disable.
As of the 5.1.151.0 release, proxy ARP is always enabled and non-configurable.
For Cisco Autonomous Access Points, enter dot11 arp-cache optional.
To Next Page
Loading...
